๐ณ๐ฑ
homeshowdomain.nl
2026-09-23 22:03:33
(15 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-22 16:39:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:39:21.110697 2026] [security2:error] [pid 13823:tid 13823] [client 34.55.196.24:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uwsvita.org"] [uri "/.git/config"] [unique_id "arKvORgYad_hn-1VXJdLmQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
conseilgouz
2026-09-22 15:58:25
(1 day ago)
upe-17 : Block hidden directories=>/.git/config(/)
Hacking
๐ฉ๐ช
LRob
2026-09-22 15:37:47
(1 day ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config | 2026-09-22 15:37 UTC
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 15:36:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:36:54.893897 2026] [security2:error] [pid 25001:tid 25001] [client 34.55.196.24:60256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unfinishedepic.com"] [uri "/.git/config"] [unique_id "arKgllFmaqmByyCHl6xnBgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-09-22 15:35:37
(1 day ago)
[Wed Sep 23 01:35:36.239277 2026] [security2:error] [pid 253900] [client 34.55.196.24:59098] [client ...
show more
[Wed Sep 23 01:35:36.239277 2026] [security2:error] [pid 253900] [client 34.55.196.24:59098] [client 34.55.196.24] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "underconstruction.paulshipley.info"] [uri "/.git/config"] [unique_id "arKgSN1voZjaiaIOBGcGmgAAAAw"]
...
show less
Web App Attack
๐ฉ๐ช
sternwart
2026-09-22 15:27:50
(1 day ago)
Automatisch erkannt: Zugriff auf /.git/config (3d.alpasana.ch)
Web App Attack
Bad Web Bot
๐ซ๐ฎ
paissangroup
2026-09-22 15:24:07
(1 day ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-22 14:59:54
(1 day ago)
Trying to access config files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:50:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:50:17.790555 2026] [security2:error] [pid 19454:tid 19454] [client 34.55.196.24:51272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "turtle-traps.com.cajunfriedturkey.com"] [uri "/.git/config"] [unique_id "arKVqeba60-Iz0feEJ3odQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 14:49:08
(1 day ago)
Scanner hitting /.git/config on turn.ara-oman.com (GOOGL-2) โ aaguard
Brute-Force
Port Scan
Anonymous
2026-09-22 14:46:02
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 14:34:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.55.196.24 (24.196.55.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:34:07.999665 2026] [security2:error] [pid 31026:tid 31026] [client 34.55.196.24:52928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ts-next.link.emmavance.com"] [uri "/.git/config"] [unique_id "arKR3yos0IkMCEgUPavB2AAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
zenmorro
2026-09-22 14:24:01
(1 day ago)
Honeypot hit (truenas:444) โ scanner-path: /.git/config. Automated report from honeypot infrastructu ...
show more
Honeypot hit (truenas:444) โ scanner-path: /.git/config. Automated report from honeypot infrastructure
show less
Port Scan
Web App Attack
๐จ๐ฆ
Anytech
2026-09-22 14:20:23
(1 day ago)
Blocked by ConnMonitor
Web App Attack